CVE-2024-21134

What it actually does

The flaw in the connection handling component permits a low-privileged network attacker to trigger a partial denial of service condition against the MySQL Server process.

Why it matters to the business

Brief interruptions to database availability can degrade application responsiveness and affect dependent business operations until the affected connections recover.

How an attack unfolds

An attacker possessing valid low-privilege credentials establishes a network connection to an affected MySQL instance and sends specially crafted protocol messages to the connection handling logic, causing the server to enter a partial denial-of-service state.

How to fix it

Upgrade MySQL Server 8.0.x to a release newer than 8.0.37 and MySQL Server 8.4.x to a release newer than 8.4.0; apply vendor-supplied patches as soon as they become available.

How to confirm the fix worked

Confirm the running MySQL version exceeds the affected thresholds, review release notes for the specific fix, and perform controlled connection-load tests to verify absence of the partial DoS behavior.

Typical attack path

1. Obtain valid low-privilege database credentials
2. Establish a network connection using supported MySQL protocols
3. Transmit crafted requests targeting the connection handling component
4. Induce partial service degradation on the target instance

How to detect it

Inspect MySQL general and error logs for repeated connection anomalies or abrupt session terminations originating from low-privilege accounts; correlate with network flow data for unusual protocol traffic volumes.

What your security team should do

• Prioritize patching of all internet-facing and internal MySQL deployments
• Limit network exposure of database instances to trusted sources only
• Enable connection throttling and monitoring for anomalous connection patterns